Skip to content

GitHub Advisory Database

Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.

GitHub reviewed advisories

Unreviewed advisories

CC-BY-4.0 License
Language support
About GitHub Advisory Database
Filter advisories

Filter advisories

GitHub reviewed advisories
All reviewed
5,000+
Composer
5,000+
Erlang
39
GitHub Actions
38
Go
2,636
Maven
5,000+
npm
4,262
NuGet
760
pip
4,057
Pub
12
RubyGems
956
Rust
1,054
Swift
45
Unreviewed advisories
All unreviewed
5,000+

1,811 advisories

Loading
A time-of-check time-of-use race condition could potentially exist in the secure file system in... High Unreviewed
CVE-2016-10242 was published May 17, 2022
Xen 4.7.x and earlier does not properly honor CR0.TS and CR0.EM, which allows local x86 HVM guest... Moderate Unreviewed
CVE-2016-7777 was published May 17, 2022
In all Android releases from CAF using the Linux kernel, a Time-of-check Time-of-use (TOCTOU)... High Unreviewed
CVE-2014-9966 was published May 17, 2022
In GPU, there is a possible use after free due to a race condition. This could lead to local... High Unreviewed
CVE-2022-20082 was published Jul 7, 2022
In MDP, there is a possible use after free due to a race condition. This could lead to local... Moderate Unreviewed
CVE-2022-21776 was published Jul 7, 2022
In TEEI driver, there is a possible use after free due to a race condition. This could lead to... Moderate Unreviewed
CVE-2022-21774 was published Jul 7, 2022
Pulp before 2.8.3 creates a temporary directory during CA key generation in an insecure manner. Moderate Unreviewed
CVE-2016-3106 was published May 17, 2022
Race condition in the get implementation in the ServiceWorkerManager class in the Service Worker... High Unreviewed
CVE-2016-2812 was published May 17, 2022
An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue... High Unreviewed
CVE-2017-2421 was published May 17, 2022
In TrustZone a time-of-check time-of-use race condition could potentially exist in a QFPROM... High Unreviewed
CVE-2015-8996 was published May 17, 2022
In TrustZone a time-of-check time-of-use race condition could potentially exist in an... High Unreviewed
CVE-2014-9936 was published May 17, 2022
yadm (yet another dotfile manager) 1.10.0 has a race condition (related to the behavior of git... Moderate Unreviewed
CVE-2017-11353 was published May 17, 2022
In dllist_remove_node of TBD, there is a possible use after free bug due to a race condition.... High Unreviewed
CVE-2021-0696 was published Oct 12, 2022
Race condition in the _get_masked_mode function in Lib/os.py in Python 3.2 through 3.5, when... Low Unreviewed
CVE-2014-2667 was published May 17, 2022
Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3... High Unreviewed
CVE-2022-33915 was published Jun 18, 2022
Dradis Professional Edition before 4.3.0 allows attackers to change an account password via... Moderate Unreviewed
CVE-2022-30028 was published Jun 25, 2022
In all Android releases from CAF using the Linux kernel, a race condition potentially exists in... High Unreviewed
CVE-2017-7368 was published May 17, 2022
In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver... Moderate Unreviewed
CVE-2017-8242 was published May 17, 2022
In TBD of TBD, there is a possible use-after-free due to a race condition. This could lead to... Moderate Unreviewed
CVE-2022-20148 was published Jun 16, 2022
In ipu_core_jqs_msg_transport_kernel_write_sync of ipu-core-jqs-msg-transport.c, there is a... High Unreviewed
CVE-2022-20155 was published Jun 16, 2022
aRts 1.5.10 and kdelibs3 3.5.10 and earlier do not properly create temporary directories, which... High Unreviewed
CVE-2015-7543 was published May 17, 2022
October CMS upload process vulnerable to RCE via Race Condition High
CVE-2022-24800 was published for october/system (Composer) Jul 13, 2022
The kernel module has the race condition vulnerability. Successful exploitation of this... Moderate Unreviewed
CVE-2022-31758 was published Jun 14, 2022
Improper serialization of message queue client registration can lead to race condition allowing... High Unreviewed
CVE-2021-35095 was published Jun 15, 2022
authd sets weak permissions for /etc/ident.key, which allows local users to obtain the key by... Moderate Unreviewed
CVE-2016-4982 was published May 17, 2022
ProTip! Advisories are also available from the GraphQL API
CC-BY-4.0 License
Language support
About GitHub Advisory Database